version 3.5.4 security vulnerabilities

The Patchstack Vulnerability Database lists two security vulnerabilities in version 3.5.4. Both of them say it’s because it’s using an insecure version of the Freemius Framework:

https://patchstack.com/database/vulnerability/final-tiles-grid-gallery-lite/wordpress-image-photo-gallery-final-tiles-grid-plugin-354-toggle-the-debug-mode-via-cross-site-request-forgery-csrf-vulnerability

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.5.4 – Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

and:

https://patchstack.com/database/vulnerability/final-tiles-grid-gallery-lite/wordpress-image-photo-gallery-final-tiles-grid-plugin-354-sensitive-information-disclosure-vulnerability

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.5.4 – Sensitive Information Disclosure vulnerability